ROS-20260401-73-0020

A vulnerability in the PNG raster graphics library Libpng is related to reading outside the allowed data buffer boundaries. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to sensitive data and cause a denial of service...

ROS-20260401-73-0016

A vulnerability in the pngdoquantize function of the pngrtran.c component of the PNG Libpng bitmap graphics library is related to reading outside the allowed data buffer boundaries. Exploitation of the vulnerability may allow an attacker to gain access to confidential data and cause a denial of...

ROS-20260401-73-0009

A vulnerability in the pngimagereaddirectscaled function of the libpng library is related to reading data outside of buffer boundaries in memory. Exploitation of the vulnerability may allow an attacker to gain unauthorized access to protected information or cause denial of service...

Debian dsa-6189 : libpng-dev - security update

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6189 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6189-1 [email protected]...

Fedora 45 : libpng12 (2026-e1669a5881)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e1669a5881 advisory. Automatic update for libpng12-1.2.57-25.fc45. Changelog Wed Apr 1 2026 Michal Hlavinka - 1.2.57-25 - fix CVE-2026-25646: heap buffer overflow in pngsetquanti...

Fedora 45 : libpng15 (2026-dfa60d30bc)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-dfa60d30bc advisory. Automatic update for libpng15-1.5.30-25.fc45. Changelog Wed Apr 1 2026 Michal Hlavinka - 1.5.30-25 - fix CVE-2026-25646: heap buffer overflow in pngsetquanti...

ROS-20260401-73-0032

Vulnerability in libpng15 related to buffer copying without checking input size. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

ROS-20260401-73-0023

A vulnerability in the PNG raster graphics library Libpng is related to reading outside of the allowed data buffer boundaries. Exploitation of the vulnerability could allow an attacker to gain access to sensitive data and cause a denial of service...

ROS-20260401-73-0022

A vulnerability in the PNG raster graphics library Libpng is related to reading outside of the allowed data buffer boundaries. Exploitation of the vulnerability could allow an attacker to gain access to sensitive data and cause a denial of service...

ROS-20260401-73-0027

Vulnerability in libpng related to buffer copying without checking input size. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

Debian: Security Advisory (DSA-6189-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ROOT-OS-DEBIAN-12-CVE-2026-22801 CVE-2026-22801 in rootio-libpng1.6 - Patched by Root

Root has patched CVE-2026-22801 in the rootio-libpng1.6 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-22695 CVE-2026-22695 in rootio-libpng1.6 - Patched by Root

Root has patched CVE-2026-22695 in the rootio-libpng1.6 package for Root:Debian:12. Multiple fixed versions available...

DSA-6189-1 libpng1.6 - security update

Bulletin has no description...

libpng16-16-1.6.56-1.1 on GA media (moderate)

libpng16-16-1.6.56-1.1 on GA media Announcement ID: openSUSE-SU-2026:10451-1 Rating: moderate Cross-References: CVE-2026-33416 CVE-2026-33636 CVSS scores: CVE-2026-33416 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-33416 SUSE : 9.2...

Mageia: Security Advisory (MGASA-2026-0070)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

LIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64

...

Oracle Linux 7 : libpng (ELSA-2026-4756)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-4756 advisory. - Fix CVE-2026-25646 Orabug: 39093556 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

CVE-2026-33636

A flaw was found in libpng. A remote attacker could exploit an out-of-bounds read and write vulnerability in the ARM/AArch64 Neon-optimized palette expansion path. This occurs when processing a final partial chunk of 8-bit paletted rows without verifying sufficient input pixels, leading to...

[slackware-security] libpng

New libpng packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libpng-1.6.56-i586-1slack15.0.txz: Upgraded. This update fixes security issues: Use-after-free via pointer aliasing in pngsettRNS and...